Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
File:                     wk1b087qqweGzhUaMXja3BB78oA.mft (raw, json)
Hash identifier:          Kegr92NGQ7I66PYbuXtqmXdIyr1ksn5xRiMMhu3yyns=
Subject key identifier:   C8:1A:03:74:75:6C:B2:56:B2:A0:D9:09:A0:9E:74:35:EE:97:26:65
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Certificate issuer:       /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial:       0198D5836F12583DA709349C43AAB1FEBF75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
Manifest number:          1461
Signing time:             Sat 23 Aug 2025 06:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:17 +0000
Files and hashes:         1: 0I0Fa0O7Xqk8PAo5VRR9HwHSvFo.roa (hash: VDz1V6rPF+444e2I1uldEDzVvDGxCwDp5UCK6SCxm94=)
                          2: Rv6zGXBjkznli3ZKfxFt4ipmauE.roa (hash: dXObCu4OgPipE+rLGUHr9IMJPVaiHyCmmOUAIbCECQQ=)
                          3: cIRs34GrM17DP76r2K4VKlnq1i8.roa (hash: gvtYS4ycN0WNeVX6nyckWypk1ijeZALWriynsiEgZyQ=)
                          4: irZgQBJdGnmucTekqqp2deRaSYE.roa (hash: exMITnVVS0zVwAaCFgSt1eOayd7B5fiXvzvzStQ9hxA=)
                          5: wk1b087qqweGzhUaMXja3BB78oA.crl (hash: BSGWUT0tPvRJTtJW5tXd+SdEbFgCBwCj5qgWfewilXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:6f:12:58:3d:a7:09:34:9c:43:aa:b1:fe:bf:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
        Validity
            Not Before: Aug 23 06:00:17 2025 GMT
            Not After : Aug 24 06:00:17 2025 GMT
        Subject: CN=c81a0374756cb256b2a0d909a09e7435ee972665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:72:26:ca:fd:e5:4a:c3:a7:36:80:77:07:5f:
                    ff:8f:98:cc:92:ff:9d:91:9d:cd:a9:ec:85:50:99:
                    ff:47:cf:e1:e4:4d:f5:16:fa:09:2f:2c:d0:e9:33:
                    ac:5b:54:e4:43:fd:cd:33:24:e0:af:c9:85:12:71:
                    95:36:0d:f1:32:77:b8:69:7c:0a:14:24:f8:bb:85:
                    a9:3f:7e:62:0f:74:47:1c:d1:65:a8:61:61:d5:e4:
                    ce:25:47:2e:80:91:89:34:7b:e4:b2:b0:9f:fd:f6:
                    14:ec:70:37:a0:50:fe:7b:5f:e5:79:87:a4:35:fe:
                    1e:ad:9f:ad:60:75:16:e1:9c:5d:b2:ee:69:88:b5:
                    8b:b2:54:3c:04:98:90:3e:c5:07:78:65:50:d2:37:
                    d8:87:48:22:9f:3f:94:85:e7:b3:53:72:ed:80:3a:
                    a8:28:ee:89:21:df:e0:16:bd:0f:57:25:2f:5b:ad:
                    db:96:85:23:34:ef:d9:6a:15:14:84:de:ae:12:cd:
                    79:59:43:30:63:9d:d0:a3:f5:7d:48:62:b0:da:52:
                    7b:b4:fa:37:45:82:bd:c0:8b:98:6c:91:47:79:ed:
                    25:9f:6a:6d:dc:67:eb:d6:ce:50:71:15:b1:c0:25:
                    f7:27:b5:f4:bf:53:da:95:e1:35:df:e8:09:de:7e:
                    80:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1A:03:74:75:6C:B2:56:B2:A0:D9:09:A0:9E:74:35:EE:97:26:65
            X509v3 Authority Key Identifier:
                keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:70:fc:6f:f5:2b:14:24:ff:bb:38:b6:8a:e8:97:6e:a5:50:
         fe:79:59:3b:2e:83:e5:24:aa:bd:e1:b2:f0:dc:d2:53:b9:d7:
         e0:23:45:81:b7:e4:8f:f6:42:4d:cb:14:20:69:92:bb:7e:af:
         03:71:1e:97:d2:27:a5:86:17:03:82:ad:d8:8c:01:ae:e6:42:
         9b:68:b3:07:80:00:2f:ad:6f:57:9f:5c:06:bb:f8:ba:34:37:
         4d:0c:ee:a8:a8:c5:81:19:e9:d3:de:89:98:f0:2f:c1:f9:76:
         77:c9:54:50:5a:3f:73:ad:96:29:63:af:17:a8:16:d0:81:21:
         36:6a:65:01:e1:da:f2:3b:60:ce:68:71:10:cb:52:1b:44:fe:
         7d:9f:0c:31:43:e0:e5:4c:22:3f:b9:52:c9:7e:e7:c0:ca:fd:
         50:4e:2e:94:db:f7:16:4c:97:c9:55:62:bd:e4:75:c8:49:7a:
         e5:eb:36:63:64:77:bd:bd:c5:61:6d:84:a2:cb:f2:48:b0:62:
         59:cc:a4:bf:f0:a1:9e:1e:c9:12:53:9a:8b:8c:43:08:9e:e2:
         b1:a4:c4:bc:51:4d:7c:8b:97:96:dc:30:37:95:26:24:ac:87:
         4b:bb:be:a7:dd:50:3b:81:a3:31:37:6b:ce:50:6c:f2:a6:67:
         fe:29:6d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:06 2025 by rpki-client